https://www.chenshaowen.com/en/tags/falco/Recent content in Falco on Shaowen Chen's WebsiteHugo -- gohugo.ioen©2016 - {year}, All Rights Reserved.Sat, 11 Feb 2023 00:00:00 +0000weeklyhttps://www.chenshaowen.com/en/blog/listen-runtime-security-using-falco.htmlSat, 11 Feb 2023 00:00:00 +0000Sat, 11 Feb 2023 00:00:00 +0000https://www.chenshaowen.com/en/blog/listen-runtime-security-using-falco.html1. What Falco Is Falco is a cloud-native runtime security project contributed to the CNCF by Sysdig. Falco implements an extensible event rule filtering engine. Through a series of operations — capturing events, matching security rules, and producing alert notifications — it can surface security problems in a system. The events come from system calls, and it also supports an ebpf probe; the rules are open source [1] and you can define your own extensions [2].微信公众号FalcoKubernetesSecurityToolsOperations